While there might not be new malicious threats under the sun, there are plenty of new ways to spin old virus attacks. Trend Micro researchers discovered last weekend a new variation of a MBR rootkit released in the wild, which contains new technology to prevent detection. When combined with Web threats, the new rootkit is proving to be both a destructive and prolific combination, security experts say.

The rootkit models a similar virus from several years ago but with one added twist -- the ability to circumvent a lot of anti-rootkit software and remain undetected. "It's a spin on an old attack," said Jamz Yaneza, research project manager for Trend Micro. "This is typical of virus writers and mothership authors trying to find ways and means to make it more difficult." The malware then sits on the infected computer unbeknownst to the user, allowing attackers to infiltrate a system in order to steal passwords, financial information and other personal data.

View: The full story @ CRN


There are 2 additional comments
Advertisement
(1 reply) Quote this comment Reply to this comment #1 Posted by +GreyWolfSC on 27 Mar 2008 - 14:50
The Article
Security researchers recommend proactive solutions, such as filtering, blocking Web threat downloads and avoiding malicious sites, before the rootkits get installed onto hard disk drives.

Despite these precautions, however, users still can be affected when the malware is served by stealthier methods, such as banner ads on legitimate sites or on links to blogsites that have been infected by attackers. "For people who aren't using up to date software, these things will definitely get through," said Yaneza. "Even if you're in a clean site, you're not 100 percent sure."


So... ads are still bad. What a shock.
Quote this comment #1.1 Posted by Tzimisce on 27 Mar 2008 - 20:36
(GreyWolfSC said @ #1)
The Article
Security researchers recommend proactive solutions, such as filtering, blocking Web threat downloads and avoiding malicious sites, before the rootkits get installed onto hard disk drives.

Despite these precautions, however, users still can be affected when the malware is served by stealthier methods, such as banner ads on legitimate sites or on links to blogsites that have been infected by attackers. "For people who aren't using up to date software, these things will definitely get through," said Yaneza. "Even if you're in a clean site, you're not 100 percent sure."


So... ads are still bad. What a shock.


+1
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....